$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft File: o0K4Har3eauhbTK2-wuDD4ULT_A.mft (raw, json) Hash identifier: hPDoSy9XvVX8+7tJIr5Y8iehnzDr6B9wGLWTbwCTy1E= Subject key identifier: 79:21:4E:C2:2F:90:93:C3:6E:55:CF:6B:7C:84:AC:FC:0F:00:BA:01 Authority key identifier: A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 Certificate issuer: /CN=A91A1205/serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Certificate serial: 0C04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft Manifest number: 0BFE Signing time: Fri 22 Aug 2025 18:52:50 +0000 Manifest this update: Fri 22 Aug 2025 18:52:49 +0000 Manifest next update: Fri 29 Aug 2025 18:52:49 +0000 Files and hashes: 1: o0K4Har3eauhbTK2-wuDD4ULT_A.crl (hash: Oc3DqOeJ4v5ETZDoawhybDmRopD3b3xqNNmpLlICpa0=) 2: 3D992D3A1A8411EAA026D229C4F9AE02.roa (hash: j0DWhsEHoal3Q4LsD1CyE+J4i6jhKjEMjW9pXFwYCvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3076 (0xc04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1205, serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Validity Not Before: Aug 22 18:52:49 2025 GMT Not After : Aug 29 18:52:49 2025 GMT Subject: CN=68a8bc81-827c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a7:94:e2:25:9f:aa:ac:3d:53:65:ab:d4:4c: bc:4e:67:dd:14:b2:19:11:3e:94:5b:8e:ba:6f:1b: d2:46:94:01:92:8f:db:7f:90:f9:7f:f8:c8:85:79: 62:aa:62:9c:1a:76:a1:fb:91:d8:d6:ee:cf:d4:ce: cc:71:fb:cc:1e:89:b7:a3:29:66:fd:0c:bd:34:65: 86:0d:86:8b:b9:7c:ff:19:5b:99:1d:2d:82:44:f3: 10:ed:3b:34:07:e1:35:61:82:2f:02:2c:80:6c:89: 2c:5a:35:6e:57:c1:69:e2:c9:63:a9:10:5e:72:17: fe:b8:d7:60:a4:15:5a:79:4a:23:c3:e8:eb:ba:06: ba:03:1f:b7:be:a4:58:24:8a:7e:ad:2b:75:99:ef: 73:58:af:e4:b7:a9:f4:f5:57:1d:4d:e7:ef:3c:e8: 10:e2:ef:d3:39:71:4f:74:b9:1b:75:58:23:80:c8: c7:c4:00:32:fc:5e:d3:11:08:11:b7:e1:50:ab:cb: 85:bd:87:33:23:21:d0:26:bc:73:85:ec:70:33:5f: 58:66:d8:57:11:e7:7e:4d:4b:ac:fa:a2:3e:84:10: cc:ab:d2:cb:1e:54:b0:a4:16:23:a0:db:66:2c:d6: fa:70:08:fb:84:d0:c0:98:78:03:88:63:8b:88:64: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:21:4E:C2:2F:90:93:C3:6E:55:CF:6B:7C:84:AC:FC:0F:00:BA:01 X509v3 Authority Key Identifier: keyid:A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:83:81:b0:8e:f0:3e:13:eb:d4:60:76:10:c2:98:f7:a2:31: 54:f8:67:53:fd:b4:eb:21:a9:53:28:7e:b8:0a:2c:1a:d1:d3: 39:83:36:e5:20:20:fc:9f:46:0f:0d:a5:88:c3:9d:bc:6b:c2: e2:89:4a:b1:0e:00:2b:c8:80:3b:93:f9:49:d6:68:c1:f3:e0: a9:04:f5:41:bd:b9:dc:6b:bc:17:cf:5f:99:2b:d0:86:2b:9f: 57:af:82:0c:78:08:19:5b:85:2b:d2:53:0b:ce:c4:dc:9b:9a: 29:b6:c6:97:44:ce:e2:20:51:24:70:a2:92:8f:ec:e7:51:4c: 3a:d6:4c:07:a3:9b:0b:17:76:fb:8c:a4:28:ea:34:61:f5:1a: 81:7f:a5:31:12:69:8e:c4:fe:12:51:04:59:ac:e0:f7:2e:35: ce:52:66:47:71:b9:a1:b4:28:c1:9e:78:32:19:3e:06:cc:16: 8a:62:a5:70:d8:5d:c1:1a:e0:08:67:f5:1a:e9:59:c9:9f:90: a8:c3:16:46:e5:e2:9c:3a:e6:89:20:7d:b9:9b:50:7e:0b:09: 1c:ad:44:b0:ac:38:29:f3:ce:86:7f:2c:a5:09:b1:25:27:23: a9:44:8d:45:53:33:fa:e2:57:24:2d:f6:d0:c2:35:d2:3a:d3: 35:95:f3:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEyMDUxMTAvBgNVBAUTKEEzNDJCODFEQUFGNzc5QUJBMTZEMzJCNkZCMEI4MzBG ODUwQjRGRjAwHhcNMjUwODIyMTg1MjQ5WhcNMjUwODI5MTg1MjQ5WjAYMRYwFAYD VQQDEw02OGE4YmM4MS04MjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk6eU4iWfqqw9U2Wr1Ey8TmfdFLIZET6UW466bxvSRpQBko/bf5D5f/jIhXli qmKcGnah+5HY1u7P1M7McfvMHom3oylm/Qy9NGWGDYaLuXz/GVuZHS2CRPMQ7Ts0 B+E1YYIvAiyAbIksWjVuV8Fp4sljqRBechf+uNdgpBVaeUojw+jruga6Ax+3vqRY JIp+rSt1me9zWK/kt6n09VcdTefvPOgQ4u/TOXFPdLkbdVgjgMjHxAAy/F7TEQgR t+FQq8uFvYczIyHQJrxzhexwM19YZthXEed+TUus+qI+hBDMq9LLHlSwpBYjoNtm LNb6cAj7hNDAmHgDiGOLiGRWgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkhTsIv kJPDblXPa3yErPwPALoBMB8GA1UdIwQYMBaAFKNCuB2q93mroW0ytvsLgw+FC0/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTIwNS83RDIzMUUwNDFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2VhdWhiVEsyLXd1REQ0VUxU X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wSzRIYXIzZWF1aGJUSzItd3VERDRVTFRfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTIwNS83RDIzMUUwNDFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2Vh dWhiVEsyLXd1REQ0VUxUX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXg4GwjvA+E+vUYHYQwpj3ojFU+GdT/bTrIalTKH64Ciwa0dM5gzbl ICD8n0YPDaWIw528a8LiiUqxDgAryIA7k/lJ1mjB8+CpBPVBvbnca7wXz1+ZK9CG K59Xr4IMeAgZW4Ur0lMLzsTcm5optsaXRM7iIFEkcKKSj+znUUw61kwHo5sLF3b7 jKQo6jRh9RqBf6UxEmmOxP4SUQRZrOD3LjXOUmZHcbmhtCjBnngyGT4GzBaKYqVw 2F3BGuAIZ/Ua6VnJn5CowxZG5eKcOuaJIH25m1B+CwkcrUSwrDgp886GfyylCbEl JyOpRI1FUzP64lckLfbQwjXSOtM1lfM0 -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:22 2025 by rpki-client